The European Union’s General Data Protection Regulation (GDPR) took effect in May. Essentially, the GDPR is a law that grants new privacy rights to individuals and enacts new obligations for companies regarding the privacy of an individual’s data. This new privacy law primarily affects companies in the European Union or larger corporations in the U.S. that connect with people worldwide. However, the GDPR also affects smaller organizations, such as TRSA, whose primary business is in the U.S. but also has contacts with members and others in Europe as well.

The aim of this law is to give individuals greater control ...